Known Vulnerabilities for Ironic by OpenStack
Listed below are 9 of the newest known vulnerabilities associated with "Ironic" by "OpenStack".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115638 json | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompres... | Not Provided | 2026-10-23 | 2026-10-29 |
| CVE-2026-90461 json | OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configure... | Not Provided | 2026-09-11 | 2026-10-09 |
| CVE-2026-90458 json | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish ser... | Not Provided | 2026-10-23 | 2026-10-29 |
| CVE-2026-89419 json | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{id... | Not Provided | 2026-10-23 | 2026-11-02 |
| CVE-2026-74250 json | In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-71568 json | In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires w... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-50589 json | Not Provided | 2026-06-05 | 2026-07-23 | |
| CVE-2026-48681 json | Not Provided | 2026-06-04 | 2026-07-22 | |
| CVE-2026-46447 json | Not Provided | 2026-06-03 | 2026-07-22 | |
| CVE-2026-44919 json | Not Provided | 2026-05-14 | 2026-10-26 |